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DETAILED ACTION 

• This office action is in response to amendment filed on January 09, 2008. The amendment 
filed on 1/9/08 have been entered and made of record. Currently Claims 1-22 and 26-31 are 
pending in the application. 



Docketing 

1 . Please note that the application has been re-docketed to different examiner. Please refer all future 
communications regarding this application to the examiner of record using the information supplied in 
the final section of the office action. 



Response to Arguments 

2. Applicant's arguments regarding claims 6-9 and 26-29 filed on 01/09/2008 have been fully 

considered but they are not persuasive: 

> Regarding Claims 6-9 and 26-29, applicant argues that, "Singhal discloses methods, systems 
and computer program instructions for providing location-independent packet routing and 
secure access in a wireless networking environment, enabling client devices to travel 
seamlessly within the environment (Singhal Abstract). When a client first communicates with 
an access point, if no valid session key already exists between them, a session key for link- 
level encryption is negotiated between them after a successful authentication of the client 
(Singhal Col. 18, Lines 30-60). The session key used for link-level encryption in the system of 
Singhal is used to ensure that data is not transmitted in clear over the wireless network, but 
this is not the same as the time-based access key, as recited in claims 6, 26, and 29." 
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> Examiner would like to point out that Batten-Carew discloses generating time-based access 
key for a predetermined time (column 2, lines 59-27). Batten-Carew is just missing the step of 
checking to see if the time-based access key is already generated and only generate new 
time-based access key if one does not exist. Singhal discloses a condition where prior to 
generating a key, system check to see the key is already generated and only generates a new 
key if one does not exist (see Column 18, lines 30-60). Singhal's reference is used only to 
teach the step of checking to see if a key is already generated and only generate new key if 
one does not exist. Singhal's reference does not need to teach time-based access key 
because Batten-Carew already discloses this limitation. 

3. Applicant's arguments, filed on 01/09/2008, with respect to the rejection(s) of claim(s) 1-5, 10- 
15, and 16-22 under U.S.C 103(a) have been fully considered and are persuasive. Therefore, the 
rejection has been withdrawn. However, upon further consideration, a new ground(s) of rejection is 
made in view of newly found prior art reference(s) combined with references on the record (see 
rejection below). 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 



Application/Control Number: 10/676,850 
Art Unit: 2135 



Page 4 



Claims 1-5 are rejected under 35 U.S.C. 103(a) as being unpatentable over Baltzlev (US 
6,292,895 B1 ), hereinafter "Baltzlev" in view of Batten-Carew et al. (US 6,603,857 B1 ), hereinafter 
" Batten -Carew". 

Regarding Claim 1, Baltzley discloses a file security system for restricting access to electronic 
files, said file security system comprising: 

a key store being configured to store a plurality of cryptographic key pairs, each of the plurality 
of cryptographic key pairs includes a public key and a private key (see, Fig. 2, Numerals 320, and 
325). 

an access manager (see Fig. 3, Numeral 220) operatively connected to said key store, said 
access manager being configured to determine whether the private key of the at least one of the 
cryptographic key pairs is permitted to be provided to a requester (see Column 2, lines 41-52). 

wherein the requester requires the private key of the at least one of the cryptographic key pair 
to access a secured electronic file (see Column 2, lines 51-52), and wherein the secured electronic 
file was previously secured using the public key of the at least one of the cryptographic key pairs (See 
Column 2, lines 55-56) 

Baltzley does not disclose a cryptographic key that pertains to a predetermined time. 

Batten-Carew discloses a method and apparatus for controlling release of time-sensitive 
information is accomplished by a server that establishes access information for a specific future time 
as passed (abstract). The method includes at least one of the cryptographic key pairs pertaining to a 
predetermined time (column 3 lines 40-47); key pairs pertaining to the predetermined time is 
permitted to be provided to a requester based on a current time (Fig. 3), wherein the requester 
requires the private key of the at least one of the cryptographic key pairs pertaining to the 
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predetermined time to access a secured electronic file (column 3 lines 48-55), and wherein the 
secured electronic file was previously secured using the public key of the at least one of the 
cryptographic key pairs pertaining to the predetermined time (Fig. 1). 

At the time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to use the time-based key of Batten-Carew in the system of Baltzley. One of ordinary skill in 
the art would have been motivated to do this because the method of Batten- Carew would allow time- 
sensitive information to be released at any time and accessed only at a specific future time based on 
the release of access information relating to the specific future time (column 2 lines 29-33). 

Regarding Claim 2, the rejection of claim 1 is incorporated and Baltzley does not teach an 
access manager only provides the private key of the at least one of the cryptographic key pairs 
pertaining to the predetermined time to the requester if the predetermined time is greater than or 
equal to the current time. 

Batten-Carew discloses a system, wherein said access manager only provides the private key 
of the at least one of the cryptographic key pairs pertaining to the predetermined time to the requester 
if the predetermined time is greater than or equal to the Current time (Fig. 3). 

At the time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to use the time-based key of Batten-Carew in the system of Baltzley. One of ordinary skill in 
the art would have been motivated to do this because the method of Batten- Carew would allow time- 
sensitive information to be released at any time and accessed only at a specific future time based on 
the release of access information relating to the specific future time (column 2 lines 29-33). 
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Regarding Claim 3, the rejection of claim 1 is incorporated and Baltzley further discloses 
wherein the requester is a client module that operatively connects to said access manager over a 
network (see Figs. 3 and 4). 

Regarding Claim 4, the rejection of claim 1 is incorporated and Baltzley does not discloses a 
system wherein said document security system further comprises: at least one client module, said 
client module assists a user in selecting the predetermined time, and said client module secures the 
electronic file using the public key of the at least one of the cryptographic key pairs pertaining to the 
predetermined time so as to provide a time-based access restriction to the electronic file. 

Batten-Carew discloses a system wherein said document security system further comprises: at 
least one client module, said client module assists a user in selecting the predetermined time, and 
said client module secures the electronic file using the public key of the at least one of the 
cryptographic key pairs pertaining to the predetermined time so as to provide a time-based access 
restriction to the electronic file (Fig. 4). 

At the time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to use the time-based key of Batten-Carew in the system of Baltzley. One of ordinary skill in 
the art would have been motivated to do this because the method of Batten- Carew would allow time- 
sensitive information to be released at any time and accessed only at a specific future time based on 
the release of access information relating to the specific future time (column 2 lines 29-33). 

Regarding Claim 5, the rejection of claim 4 is incorporated and Baltzley does not disclose 
wherein said client module further assists in unsecuring the secured electronic file by acquiring the 
private key of the at least one of the cryptographic key pairs that pertaining to the predetermined time 
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from said key store, and then unsecuring the secured electronic file using the private key of the at 
least one of the cryptographic key pairs that pertaining to the predetermined time 

Batten-Carew discloses a system wherein said client module further assists in unsecuring the 
secured electronic file by acquiring the private key of the at least one of the cryptographic key pairs 
that pertaining to the predetermined time from said key store, and then unsecuring the secured 
electronic file using the private key of the at least one of the cryptographic key pairs that pertaining to 
the predetermined time (Fig. 3 and Fig. 4). 

At the time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to use the time-based key of Batten-Carew in the system of Baltzley. One of ordinary skill in 
the art would have been motivated to do this because the method of Batten- Carew would allow time- 
sensitive information to be released at any time and accessed only at a specific future time based on 
the release of access information relating to the specific future time (column 2 lines 29-33). 

Claims 6-9 and 26-29 are rejected under 35 U.S.C. 103(a) as being unpatentable over Batten- 
Carew in view of Sinqhal et al. (US 6.851 .050 B2). hereinafter "Sinqhal"). 

Regarding Claims 6, 26 and 29, Batten-Carew discloses an apparatus, a corresponding 
method and a corresponding computer program for controlling release of time-sensitive information, 
said method comprising: 

Identifying an electronic document to be secured, the electronic document having at least a 
data portion that contains data (Column 2, lines 59-67); 

generating a time-based access key for a predetermined time (see Column 3, lines 34-40); 
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securing the electronic document through use of the time-based access key to produce a 
secured electronic document (Column 3, lines 49-52); and 

storing the secured electronic document (Column 3, lines 50-52). 

Even though Batten-Carew discloses generating time-based access key for a predetermined 
time it does not explicitly discloses a step of determining whether a time-based access key is already 
available for a predetermined time, otherwise generating a time-based access key for the 
predetermined time. Batten-Carew is just missing the step of checking to see if the time-based 
access key is already generated and only generate new time-based access key if one does not exist. 

Singhal discloses a condition where prior to generating a key, system check to see the key is 
already generated and only generates a new key if one does not exist (see Column 18, lines 30-60). 

Therefore, it would have been obvious at the time the invention was made to one of ordinary 
skill in the art to generate, the time-based access key of Batten-Carew, only if the key doesn't already 
exist. One of ordinary skill in the art would have been motivated to check this condition prior to 
generating new time-based access key in a case where sender is sending more then one document 
and all document are suppose to release on the same time. In such a condition it would be 
appropriate to simply use the same time-based access key rather then generating multiple time- 
based access keys for the same predetermined time. 

Regarding Claims 7 and 27, Batten-Carew discloses a method wherein the time-based 
access key has an access time associated therewith (column 3 lines 4-23'). 

Regarding Claims 8 and 28, Batten-Carew discloses a method wherein said method further 
comprises: storing the time-based access key at a remote key store, and wherein the time-based 
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access key is subsequently retrievable from the remote key store only if the current time equals or 
exceeds the access time associated with the time-based access key (Fig. 1 and Fig. 3). 

Regarding Claim 9, Batten-Carew discloses a method wherein said method is performed on a 
client machine that operatively receives the time-based access key from the remote key store over a 
network (Fig. 1 and column 3 lines 32-35). 

Claims 10, 12, 13, 15 and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Peterson, Jr. (US 5,825,876), hereinafter "Peterson" in view of Auerbach et al. (US 5,673,316), 
hereinafter "Auerbach". 

Regarding Claims 10 and 30, Peterson, Jr. (US 5,825,876) discloses a method and a 
corresponding computer program for restricting access to an electronic document, said method 
comprising: 

Identifying an electronic document to be secured, the electronic document to be secured, the 
electronic document having at least a data portion that contains data (see Column 2, lines 46-50); 
obtaining a document key (See Column 5, lines 50-53); 

encrypting the data portion of the electronic document using the document key to produce an 
encrypted data potion (see Column 5, lines 50-53); 

obtaining a time-based access key (See Column 7, lines 6-9, "Single Key K"); 

encrypting the document key using the time-based access key to produce an encrypted 
document key (see Column 7, lines 6-9, block keys are encrypted using Single key K); 

forming a secured electronic document from at least the encrypted data portion (see Fig. 1 , 
Numeral 28). 
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Peterson discloses Medium 10 (Fig. 1) having encrypted data and Client terminal having Ki 
Buffer (Fig. 1 , Numeral 48) that stores the encrypted block key, Peterson reference does not explicitly 
discloses from where this encrypted block key comes from in the buffer. Therefore, Peterson 
reference does not explicitly discloses that the encrypted data keys are also provided from the 
medium 10. 

However, Auerbach discloses a step of forming a secured electronic document from at least 
the encrypted data portion and the encrypted document key (see Fig. 2, Numeral 203, "Encrypted 
Document Part" and Numeral 202, "Encrypted PEK"). 

Therefore, it would have been obvious at the time the invention was made to one of ordinary 
skill in the art to include, in the medium containing the encrypted data of Peterson, encrypted keys as 
well as taught by Auerbach so that encrypted data and encrypted keys both can be transmitted to the 
receiver at the same time using the same media and since keys are encrypted with single key K, 
which is not provided to the client until client pay for the content, it also would not have any security 
problem. 

Peterson further discloses storing the secured electronic document (see Column 5, lines 53- 

54). 

Regarding Claim 12, Peterson discloses wherein the time-based access key has an access 
time associated therewith (see Column 7, lines 30-38) 

Regarding Claim 13, Peterson discloses wherein the time-based access key is available from 
a remote key store when the current time is equal to or greater than the access time associated with 
the time-based access key (see Column 4, lines 34-55). 
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Regarding Claim 14, Peterson discloses wherein the access time is a day of a year (see 
Column 3, lines 42-55) and the time-based access keys are unique for each day of the year (see 
Column 3, lines 42-55). 

Regarding Claim 15, Peterson further discloses wherein said method is performed on a client 
machine that operatively receives the time-based access key from the remote key store over a 
network (see Column 6, lines 63-66). 

Claim 1 1 is rejected under 35 U.S.C. 1 03(a) as being unpatentable over Peterson in view of 
Auerbach and further in view of Batten-Carew. 

Regarding Claim 11, Peterson uses the same key for encrypting and decrypting the block 
encryption keys and does not use asymmetric key pair for this purpose. Therefore, Peterson does not 
disclose wherein the time-based access key is a public time-based access key. 

At the time invention was made asymmetric encryption was well known in the art. Batten- 
Carew discloses using a public time-based access key (Column 3, lines 48-64). 

Therefore, it would have been obvious at the time the invention was made to one of ordinary 
skill in the art to use, in the system of Peterson, asymmetric time based encryption key pair as taught 
by Batten-Carew rather then simply using symmetric key. Symmetric and asymmetric key techniques 
were well known in the art at the time invention was made and one of ordinary skill in the art would 
have used asymmetric time-based access key pair in the system of Peterson instead of symmetric 
key because asymmetric encryption provide both confidentiality and authentication. 



Claims 16, 17, 19-22 and 31 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Peterson in view of Nozawa et al. (US 5.235.641). hereinafter Nozawa. 
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Regarding Claims 16 and 31, Peterson discloses a method and a corresponding computer 
program for accessing a secure document by a resister, said method comprising: 
obtaining a time-based access key (Column 6, lines 62-63, "Key K"); 
obtaining an encrypted document key (Column 7, lines 1-2, Ki); 

decrypting the encrypted document key using the time-based access key produce a document 
key (Column 7, lines 1-2, encrypted Kare decrypted using key K); 

decrypting an encrypted data portion of the secured electronic document using the document 
key to produce a data portion (Column 9, lines 36-40); and 

supplying the data portion to the requester (Column 9, line 44). 

Peterson discloses obtaining an encrypted document key however he does not explicitly 
discloses obtaining an encrypted document key from the header portion of the secured electronic 
document. 

Nozawa et al. (US 5,235,641 ) discloses obtaining a encrypted document key from the header 
portion of the secured electronic document (see Column 6, lines 36-40). 

Therefore, it would have been obvious at the time the invention was made to one or ordinary 
skill in the art to include, the encrypted data keys of Peterson, into the header of the secure data as 
taught by Nozawa so that encrypted data and encrypted keys both can be transmitted to the receiver 
at the same time using the same media and since keys are encrypted with single key K, which is not 
provided to the client until client pay for the content, it also would not have any security problem. 

Regarding Claim 17, Peterson discloses wherein the time-based access key is identified by an 
indicator within a header portion of the secured electronic document (see Fig. 1, Numeral 24 and also 
Column 6, lines 50-51). 
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Regarding Claim 20, Peterson discloses wherein said obtaining of the time-based access key 
is dependent on the current time (see Column 7, lines 30-38). 

Regarding Claim 21, Peterson discloses wherein the time-based access key is associated with 
an access time, and wherein said obtaining of the time-based access key is permitted when the 
current time is greater than or equal to the access time (Column 7, lines 30-38). 

Regarding Claim 22, Peterson discloses wherein, if permitted, during said obtaining step the 
time-based access key is obtained from a server (Column 8, lines 37-39). 

Claims 18 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over Peterson in 
view of Nozawa and further in view of Batten-Carew. 

Regarding Claim 18, Peterson uses the same key for encrypting and decrypting the block 
encryption keys and does not use asymmetric key pair for this purpose. Therefore, Peterson does not 
disclose wherein the time-based access key is a private time-based access key. 

At the time invention was made asymmetric encryption was well known in the art. Batten- 
Carew discloses using a private time-based access key (Column 3, lines 48-64). 

Therefore, it would have been obvious at the time the invention was made to one of ordinary 
skill in the art to use, in the system of Peterson, asymmetric time based encryption key pair as taught 
by Batten-Carew rather then simply using symmetric key. Symmetric and asymmetric key techniques 
were well known in the art at the time invention was made and one of ordinary skill in the art would 
have used asymmetric time-based access key pair in the system of Peterson instead of symmetric 
key because asymmetric encryption provide both confidentiality and authentication. 

Regarding Claim 19, Peterson discloses wherein the time-based access key being obtained is 
acquired from a server (Column 6, lines 62-63). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to YOGESH PALIWAL whose telephone number is (571)270-1807. The examiner 
can normally be reached on M-F: 7:30 AM - 5:00 PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Kim Vu can be reached on (571 ) 272-3859. The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained 
from either Private PAIR or Public PAIR. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the 
Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information system, call 800- 
786-9199 (IN USA OR CANADA) or 571-272-1000. 

FY. P.I 

Examiner, Art Unit 2135 
/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



